Documente Academic
Documente Profesional
Documente Cultură
x Best Practices
John Johnson
Field Support Services johnjo@us.ibm.com
2006 IBM Corporation
Best Practices
Server OS
Install Lotus Traveler on Windows 64-bit server
Access to > 2GB virtual memory is critical in larger mobile user populations (> 300) Virtual memory is shared Group | Domino software and can IBM Software across all Lotus processes exceed 2GB For 32-bit servers Reduce memory overhead with notes.ini setting NFS_BUFFER_POOL_SIZE_MB=256
Best Practices
Best Practices
Best Practices
Daily Traveler Status Verify the status of the Notes Traveler server daily by running the command 'tell traveler status' This will give various listings. Look for the status of Red, Yellow, or Green, such as the following:
Best Practices
Daily Traveler Status - continued If the status is green, no further checking is necessary. If the status is Yellow or Red, some review is necessary. Most yellow and red status are caused by threads becoming hung. These are explained in this link: http://wwwIBM Software Group | Lotus software 10.lotus.com/ldd/dominowiki.nsf/dx/Status_command_considerations_a nd_examples_LNT853 However, other causes may also be listed. A listing of possible results and what they mean can be found at this link: http://www10.lotus.com/ldd/dominowiki.nsf/dx/System_status_results_LNT853
Best Practices
Best Practices
Server Threads
If enough server threads are not available, devices will fail to sync with 503 error (Server not available) Verify thread allocation matches expected number of active devices
Beginning in 8.5.2, all devices use HTTP threads Set HTTP Active Threads to 1.2 times active devices Server Configuration | Internet Protocols | HTTP
Domino HTTP threads are allocated at startup, so do not allocate more threads than needed
Best Practices
Device Connections
Configure Domino HTTP server to use SSL and redirect HTTP port to SSL
Redirecting allows Group | Lotus software or https IBM Software end users to type in either http from their browser and they will get to the website page If only HTTPS is enabled, then browser just gets a server not found error if user uses default http
If Proxy is using a custom URL path, make sure it routes to traveler_host/servlet/traveler Details at:
http://www-10.lotus.com/ldd/dominowiki.nsf/dx/Securing_the_connection_LNT853
Best Practices
Single Sign On Only applicable if you are using an authenticating proxy in front of Lotus Traveler server Must setup Domino HTTP session authentication for multi-server authentication Setup to use LTPA tokens Proxy handles authentication at the front-end, inserts trusted LTPA token as credentials Removes need to re-authenticate the user at the HTTP service on the Lotus Traveler server
Best Practices
Password Lockout
If authenticating against corporate LDAP or system
which locks out after 'n' failed password attempts, consider enabling Domino Internet Lockout database.
Typical failing scenario is that user changes backend intranet password every 'n' days and forgets to change on the device IBM Software Group | Lotus software Traveler on WM/Nokia devices stop retrying after 1 failure, but Apple devices continue to retry http://www.ibm.com/developerworks/lotus/library/domino8lockout/index.html Lotus Mobile Connect HTTP Access feature is tuned to support this well, so is recommended as a front-end proxy
Best Practices
Best Practices
Best Practices
Transactional Logging
Purpose of the Notes Traveler server is to pass along requests for information, more so than the updating of databases. Transaction Logging is an unnecessary software on IBM Software Group | Lotus overhead system resources Recommendation is to disable
Best Practices
References
Recommended Maintenance:
http://www.ibm.com/support/docview.wss?uid=swg24019529
Fix Central:
http://www.ibm.com/support/fixcentral
Best Practices
References
Domino Wiki
http://www-10.lotus.com/ldd/dominowiki.nsf
Questions?
IBM Software Group | Lotus software